Bank-Grade Security & Row-Level Isolation
Learn how ManRiq protects your company data with strict multi-tenant boundaries, Cloudflare R2 token signing, and comprehensive audit logs.
Multi-Tenant Data Encryption
All sensitive credentials (SMTP passwords, SMS API keys, R2 tokens) are encrypted with AES-256 and isolated tenant-by-tenant. Tenant superadmins never see root platform secrets.
Strict Tree Delegation
Permission hierarchy enforced at the model and policy level. A tenant actor can never escalate privileges or grant permissions beyond their assigned scope.
Immutable Activity Audit Logs
Every login, role modification, data export, and setting change is indexed in Elasticsearch with actor ID, IP address, timestamp, and previous state diffs.
Cloudflare R2 Secure Token Storage
Telemetry media files and sensitive attachments are stored in private Cloudflare R2 buckets and accessed strictly via short-lived signed URLs.